This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer
File: 231e7311-eefe-40ee-a478-3ca2852934bf.cer (raw, json)
Hash identifier: SBqnZ7a6f+HufssKaBmrXW6IfGB80ypa98kxn2AVdVs=
Subject key identifier: E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584C69E9B2BEF1D77E62B9F89640
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 04 Jan 2026 13:45:23 +0000
Certificate not after: Sat 08 Apr 2028 12:45:23 +0000
Subordinate resources: IP: 170.52.44.0/22
IP: 192.190.134.0/23
IP: 2620:34:a000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:69:e9:b2:be:f1:d7:7e:62:b9:f8:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jan 4 13:45:23 2026 GMT
Not After : Apr 8 12:45:23 2028 GMT
Subject: CN=231e7311-eefe-40ee-a478-3ca2852934bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:3e:d0:72:1a:bf:a3:ba:da:06:cb:07:92:
72:4c:df:95:ed:7b:b4:36:d5:b2:26:23:e8:18:e3:
f0:26:f9:43:db:f8:8e:df:f7:81:00:30:8a:cd:67:
b4:f0:db:e5:fb:58:77:12:71:49:3e:78:09:98:6a:
85:47:7f:00:ca:0f:17:44:ee:69:72:17:71:f5:a3:
12:97:d3:42:57:33:25:1a:04:a7:77:d3:78:f8:74:
11:00:91:62:23:ef:9e:20:8d:23:aa:c0:a4:9b:cc:
54:56:8e:0e:6a:0a:33:49:ec:5b:5c:59:62:96:62:
d9:d2:32:82:b0:57:1d:9e:67:e7:3c:3b:39:e7:2c:
dc:12:51:3d:a0:c5:85:b0:32:b4:98:9d:d7:40:73:
c5:ef:df:4e:67:21:86:6a:63:42:88:ae:74:88:3d:
33:37:5d:35:a6:80:0d:71:34:de:b6:48:2a:49:1e:
ce:56:5a:28:ac:e6:64:7d:f4:a4:af:d9:8d:26:49:
36:69:aa:fe:c6:02:9d:93:59:26:77:fd:e9:07:50:
91:1a:ad:ca:0f:7e:9b:42:75:cc:07:ce:de:18:df:
41:ee:ad:ca:16:bc:25:d2:b9:4f:e2:37:ba:24:c6:
5f:f3:c6:e4:4b:0a:20:89:fb:40:f4:a6:91:e1:80:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.52.44.0/22
192.190.134.0/23
IPv6:
2620:34:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:92:4c:cb:b3:d2:20:c9:0d:72:be:99:e7:81:f2:d6:26:dc:
f8:85:de:4a:9e:33:a1:ec:0e:dd:2b:7d:4b:cd:ab:20:5e:68:
41:f8:66:04:43:a3:5b:b0:f4:b1:e7:14:e8:38:de:6f:d0:2d:
b1:02:32:85:75:04:78:c3:fc:d4:ed:ed:a4:84:f9:c5:62:5e:
13:5b:69:38:93:49:e0:a3:08:18:97:de:2b:67:18:51:56:22:
2a:59:47:d8:ce:db:a2:38:44:75:00:e6:7b:d8:70:06:c9:1a:
6b:d1:ab:00:a6:8b:4c:85:f1:67:b5:8b:d6:20:05:14:7a:99:
bb:14:d8:8e:d5:6a:b0:82:55:d8:be:87:c3:bc:68:55:46:16:
3b:24:0b:56:60:b8:92:38:1f:ed:25:21:71:6b:66:63:cd:7f:
ee:d7:6c:d4:dc:83:5c:e2:85:57:8b:ce:3b:56:46:28:f6:29:
82:e1:e2:f1:bd:34:ee:8c:f9:06:d2:85:1d:a8:da:57:fa:b0:
7c:ba:46:c2:7e:32:c6:3b:60:ac:6f:ed:06:bd:be:3e:8b:ac:
39:ad:9e:b4:51:f4:1b:b6:19:eb:34:2e:49:dc:27:d5:5c:37:
3e:1e:9a:2c:af:fe:b7:52:0a:88:c4:9c:e4:e7:6d:d7:db:dc:
6d:18:19:24
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUAQ0Mn0MoWExp6bK+8dd+Yrn4lkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI2MDEwNDEzNDUyM1oXDTI4MDQwODEyNDUyM1owLzEtMCsGA1UEAxMk
MjMxZTczMTEtZWVmZS00MGVlLWE0NzgtM2NhMjg1MjkzNGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrw+0HIav6O62gbLB5JyTN+V7Xu0NtWyJiPo
GOPwJvlD2/iO3/eBADCKzWe08Nvl+1h3EnFJPngJmGqFR38Ayg8XRO5pchdx9aMS
l9NCVzMlGgSnd9N4+HQRAJFiI++eII0jqsCkm8xUVo4OagozSexbXFlilmLZ0jKC
sFcdnmfnPDs55yzcElE9oMWFsDK0mJ3XQHPF799OZyGGamNCiK50iD0zN101poAN
cTTetkgqSR7OVloorOZkffSkr9mNJkk2aar+xgKdk1kmd/3pB1CRGq3KD36bQnXM
B87eGN9B7q3KFrwl0rlP4je6JMZf88bkSwogiftA9KaR4YCGDQIDAQABo4IEFjCC
BBIwHQYDVR0OBBYEFOX8ceHagboIxLhi1Ad6tENpQl1eMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y
MzFlNzMxMS1lZWZlLTQwZWUtYTQ3OC0zY2EyODUyOTM0YmYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIzMWU3MzExLWVlZmUtNDBlZS1h
NDc4LTNjYTI4NTI5MzRiZi8yMzFlNzMxMS1lZWZlLTQwZWUtYTQ3OC0zY2EyODUy
OTM0YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBIEAgABMAwDBAKqNCwDBAHAvoYwDwQCAAIwCQMHBCYgADSgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQATkkzLs9IgyQ1yvpnngfLWJtz4hd5KnjOh7A7dK31LzasgXmhB+GYE
Q6NbsPSx5xToON5v0C2xAjKFdQR4w/zU7e2khPnFYl4TW2k4k0ngowgYl94rZxhR
ViIqWUfYztuiOER1AOZ72HAGyRpr0asApotMhfFntYvWIAUUepm7FNiO1WqwglXY
vofDvGhVRhY7JAtWYLiSOB/tJSFxa2ZjzX/u12zU3INc4oVXi847VkYo9imC4eLx
vTTujPkG0oUdqNpX+rB8ukbCfjLGO2Csb+0Gvb4+i6w5rZ60UfQbthnrNC5J3CfV
XDc+Hposr/63UgqIxJzk523X29xtGBkk
-----END CERTIFICATE-----
Generated at Fri Jan 9 01:22:30 2026 by rpki-client